Is jQuery .text() method XSS safe?I have unescaped data from users. So is it safe to use like this: var data = '<test>a&f"#</test>'; // example data from ajax response if (typeof(data) === 'string') $('body').text(data); Can I use like this or there is some problems like encoding or some specific symbols that I should be careful and add more strict validation?
Amazon.co.jp: 作りながら基礎から学ぶPHPによるWebアプリケーション入門XAMPP/jQuery/HTML5で作るイマドキのWe: 清野克行: 本
